Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa
File:                     323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa (raw, json)
Hash identifier:          CbQ0buw4f1C4iF8ufBjtavEnnK3RR5GvkCI8uo5UKB0=
Subject key identifier:   9B:6E:1B:30:7B:AE:AA:DC:50:3F:8E:AF:DD:E8:6B:3E:97:71:BE:01
Certificate issuer:       /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial:       2D7E4FC5476113167743D53D2D307CE553E5A989
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa
Signing time:             Thu 05 Nov 2026 14:12:21 +0000
ROA not before:           Thu 05 Nov 2026 14:07:21 +0000
ROA not after:            Thu 04 Nov 2027 14:12:21 +0000
asID:                     262875
IP address blocks:        2804:990:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
                          rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Nov 2026 16:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7e:4f:c5:47:61:13:16:77:43:d5:3d:2d:30:7c:e5:53:e5:a9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
        Validity
            Not Before: Nov  5 14:07:21 2026 GMT
            Not After : Nov  4 14:12:21 2027 GMT
        Subject: CN=9B6E1B307BAEAADC503F8EAFDDE86B3E9771BE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:6d:20:45:0b:a7:a2:c4:53:38:0f:fd:f9:
                    18:55:dd:78:67:1d:ff:f6:b9:9d:dc:ce:ff:43:7e:
                    a0:7c:74:63:ce:36:c4:f8:5b:e2:0f:ba:5b:ed:de:
                    3d:30:32:a2:09:82:9a:f6:e9:3e:54:95:bc:17:6e:
                    ef:c3:29:38:71:3f:85:be:19:43:22:93:c4:b7:f8:
                    d0:01:d6:7e:bb:18:9b:19:d8:a4:be:b1:3b:a1:74:
                    57:8d:6d:0b:ad:28:83:50:b1:5e:8a:84:a2:07:e9:
                    6b:7e:89:fa:e2:9b:2c:1d:f2:72:45:43:20:b0:11:
                    bb:0f:0a:b0:89:e1:6b:da:12:ab:b4:14:fb:80:3c:
                    d8:98:c8:52:4e:79:0f:94:12:35:5f:c8:20:e7:1d:
                    7e:5b:9a:56:e2:25:e2:c3:62:c7:d2:f8:9b:56:e3:
                    07:85:f1:7d:72:08:c1:41:e5:1e:a0:be:e5:56:16:
                    7e:2b:39:c9:9b:67:71:85:9c:7d:c9:0f:01:0d:27:
                    bf:73:52:53:e8:9d:7c:21:52:2f:fa:25:a7:95:6b:
                    1e:2a:8f:28:86:bc:dc:02:64:cd:5f:b3:f0:7b:00:
                    d2:86:15:1d:a9:e6:fe:5d:fc:3c:85:94:f3:49:e5:
                    ec:29:55:80:09:ff:b2:36:b3:4e:df:80:46:4e:93:
                    0b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6E:1B:30:7B:AE:AA:DC:50:3F:8E:AF:DD:E8:6B:3E:97:71:BE:01
            X509v3 Authority Key Identifier:
                keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a383030303a3a2f33342d3334203d3e20323632383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:990:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6c:40:30:68:01:7c:a1:04:db:d3:4c:7e:db:9e:8e:d5:fe:ab:
         52:06:df:7f:d2:bf:60:76:00:0e:1b:1f:12:91:b2:5c:19:ca:
         cc:97:ca:4e:51:75:b7:ea:75:43:bb:02:14:b6:23:e5:1b:33:
         26:da:c5:cc:a0:88:69:64:cd:31:3b:e5:21:a2:87:2f:5a:35:
         8b:11:a7:6d:b4:92:80:4e:4f:71:91:1b:90:cb:38:b7:a5:cd:
         c0:5e:5e:5e:01:16:4e:5c:c9:76:5b:8e:79:f4:01:12:36:97:
         15:9c:3b:9e:f6:ca:ec:e2:d2:1c:d7:ed:ca:67:26:ab:fc:5b:
         e7:a6:60:29:9b:b9:a9:bd:ff:9f:b0:28:d5:f2:af:63:cd:c4:
         53:d5:ef:27:94:2f:dd:f2:3f:90:6c:db:41:57:c7:29:93:47:
         9b:2f:06:00:5a:71:f7:4d:88:92:88:7e:89:2a:87:ee:95:15:
         34:99:cb:21:b6:b0:1f:36:89:e7:e8:04:2c:23:d7:45:18:fe:
         c4:02:b9:aa:79:f3:0d:ac:8e:9f:09:bf:1c:8b:07:c6:75:32:
         31:3f:49:02:4c:98:bd:0c:e1:f4:70:89:e0:29:42:1d:15:53:
         a4:18:cd:d2:29:b4:0c:cc:88:52:8e:f1:e6:b6:19:17:37:92:
         9b:3c:c9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:56:09 2026 by rpki-client